f 



(12) 



UK Patent Application „.,GB „„2 136 992 A 



(43) Applicotlort pohlUhmf 20 Sop 1004 



121) Application No 8307600 
(22) Uaiooltfllnu 18 Mar 1983 



17 1) AppHcnni 

Goorg V. Coxa 

Hold#rgassa28. D 7141 SchwItbardlnQan. Fadaral 
Rapubllc of Oarmany 

172) Invontor 

Qaorg V. Coin, 

(74) Agirnt nntl/or arhlrass for aorvlco 

E. N. Lowli Er Taylor, 144 Now Walk, Lalcaatar. LEI 
7JA 



l&t) INTCL' 

OO0M 1/20 01 1C 1 V00 20/00 

157) Do i nun tin clamilflcnllon 
04AEF 

U18 100021U3Q4A 



(50) Oocuniftnia cited 
08 1531628 
Q8 1628100 
OB 1488271 
OB 1346219 

(56) Hold of noofch 
04A 



EP A 0066084 
EP A 0032067 
Ef> A 0029304 



(54) Method and System of Ensuring Integrity of Data In an Electronic Memory 

whh St?" r ( °7 CJ ?i tion x **\ 90mo momor V cells in a memory may become defective, the initial data together 
ES^, iU t feSS * l) arG H t0r °? 81 ° rep,acoment address W/l. A register, further, .tores those addresses 
IN r which relate to memory cells or locations which have become defective. When a computer ( 1 } addresses 
data, a comparator (9) compares the callod-for address with the address stored in the defective cell register 
(10) and. upon equality, youtes the data request to the replacement address (N/) which mny he a complete ' 

mo „nS C r A lat0d . l0 8 " jfefenC0 8ddreSS * SUCh ;<S a torminal P° rtion of a " ™««*Y memory 

ho ni.nn memory, or the like. A warning signal can be given whnn most, but not yet all. auniliary memory 
locations nru occupied. ' 



1 



tit 



"7T 



10 



10 



0 hi' 



H (i 



N 



/ 3 » y ' 



;<3 



12 



30 



-5 



*3o 



FIG3. 



The drawings originally filed were informal and the prim here reproduced it taken from a later f.l 



O 

CD 

ro 
oo 

CD 
CD 

ro 



D 

f 

I 

c 



O 

o 

T3 



Jed formal copy. 



i/o 2136992 




FIG 



N| 
N3 
N2 



On 



N 3 



0 2 



Nl 
01 



2136992 




1 



00 2 138 992 A 1 



SPECIFICATION 

Method and 8yttam of Ensuring Integrity of 
Data In an Elaotronlo Memory 

Tho proaont Invention relates to a method ond 
6 system of ensuring Integrity of data In an 
electronic momory and more particularly to 
electronic memory eloments or units which are 
Instollod orv board an automotive vehicle to store 
Information and dota relating to the operating 

1 0 characteristics of the vohlcl* onglno for example 
data relating to Ignition timing and the like. 

Various types of memory units which Include 
memory elements or colls use erasable 
programmable read-only memories {EPROMs). 

1 6 Such memory elements or cells may be formed by 
two serially connected field effect transistors 
(FETs), In which one FET acts as a constant 
current source, and the other changes Its 
resistance under control of pulses applied to the 

20 gate thereof. Reed-out of the stored data, which 
are represented by either high or low resistance 
values of the controlled FET, and hence the 
voltage thereacross, Is obtained by determining 
the voltage level at the Junction between the main 

2 5 current carrying paths of the two serially 
connected FETs. 

It is known that memory cells of this type can 
change their data storage characteristics due to 
various external Influences which particularly 

30 include temperature, incidence of light, 

penetration of moisture or humity, and the like. 
German Offonlegungschrift DE — OS 28 53 925 
described such changes. Change In the 
characteristics of operation of the EPROM may 

35 be caused by external effects which detract from 
the insulating capability of the gate of the FET, so 
. that charge carriers may leak off from the gate. 
The opposite effect may, however, occur, namely 
that charge carriers can be applied to the gate of a 

40 storage cell, for example because insulation to the 
surrounding area is defective, or energy is being 
applied thereto, for example by leakage of light. 
The change in charge state of the gate electrode 
usually is not abrupt, but rather is a gradual, slow 

45 change; yet after some time, the charge wiil be 
tost. 

It has previously been proposed to avoid loss of 
charge on an EPROM by refreshing the date 
stored therein. The on-board control computer for 

50 a motor vehicle, for example, can be so arranged 
that a refreshing circuit reprograms the EPROMs 
of the memory at uniform intervals. This method 
can be used,, however, only if the memory 
cells are still at least of such integrity that their 

55 original data can be read out, for reprogramming 
or refreshing the date therein. Refreshing the data 
in a memory cell of course will not lead to the 
desired result if the cell itself is defective, and the 
loss of the data is not caused by external 

60 influences. 

Loss of data in a memory can be avoided by 
providing redundant storage. It is, for example, 
possible to store all data twice in a memory of 
sufficiently large storage capacity and then 



66 provldo comparisons or subtractions or summing 
of the data storod In tho respoctlvo memorlos, and 
then, with a tost program, determining which sot 
of data In tho two momorles Is In ordor, and which 
may havo boon storod In a dofoctlvo manner. 

70 The requirement of momory capacity In such 
units Is, howovor, high, which substantially 
Increases tho prlco of the oloctronlc oqulpmont, 
contributes to complexity, which Is another couso 
of possible malfunction, and requires oddltlonol 

7 5 space and auxiliary oqulpmont. 

It Is an object to provldo a method ond systom 
In which tho Integrity of data stored in electronic 
memorlos. particularly In EPROMs of 
the multlpio field effect transistor (FET) type, can 

80 be ensured, so thot the data will always be 
available, correctly, for processing In a 
computer, and espoclally In an on-board 
computer of an automattve vehicle. 

Briefly. It Is suspocted that a specific data cell 

85 has a tendency to become defective, the original 
data, together with the original address, aro 
stored In an auxiliary memory cell, or a 
replacement memory which may have only a 
substantially smaller number of memory 

90 addressos and locations than tho overall momory 
Itself, togethor with a replacement address. 

In accordance with a foaturo of the Invention, 
the original address is oddrossod by the computer, 
and a determination is mado if the originot 

95 address stores data subject to malfunction of the 
momory; if so, tho data are then addressod with 
reference to the original address in an auxiliary 
memory location. 

In accordance with a loature of the invention, a 
100 memory correction unit is provided, located 
between the computer and a memory unit, the 
memory correction unit including a comparator in 
which addresses which are supplied by the 
computer are compared with the addresses 
1 05 stored therein, the addresses stored in the 

memory correction unit, of course, being those 
which relate to defective memory cells. If 
the comparator indicates equality — in other 
words, that an addressed memory location is in a 
110 defective storage cell — a replacement or auxiliary 
address then will be addressed. 

The method and system has the advantage 
that only the data on those addresses which 
characterize data cells which are or may become 
1 1 5 defective need be stored in a replacement or 
auxiliary address, together with the original 
addreeo. Usually, only a few memory cells of a 
memory unit wiil be defective; thus, it is only 
necessary to provide only so many replacement or 
1 20 auxiliary cells at respective replacement or 
auxiliary addresses which, reasonably, may be 
required to replace possibly defective cells or cells 
which become defective in course of time. 
Consequently, only a comparatively small number 
1 25 of additional memory cells are required in order to 
ensure operating reliability and storage of the 
required data and programs for a computer, and 
especially for an on-board vehicular type 
computer. 
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In accordonco with a proforrod feature of thu 
Invention, It Is desirable to so arrange tho auxiliary 
or roplacemont colls that. If a predetermined 
number thereof, which should bo somewhat less 
5 than tho overall number avallablo, Is utlllzod to 70 
store data from defective cells, a warning signal 
or Indicating signal Is suppllod so that the 
operator or user Is warned that the replacement 
capability of memory colls Is about to becomo 

10 exhausted, so that roplacomont of tho entire 75 
memory can be considered. Some arrangements 
thus aro available which permit recognition that 
the original memory contains a larger numbor of 
defective cells, or colls which tend to become 

16 defective. 80 
In accordance with a further and preferred 
feature of tho Invention, the replacement 
addresses can be stored In a correction memory 
which forms a part of the program and/or data 

20 memory of the computer system. This 85 
arrangement avoids the requirement of adding 
additional memory units or structures. The 
correction memory may bo part of an existing 
memory module or the like, that Is, an existing 

25 memory in which a portion of the available 90 
memory addressos is reserved for correction or 
replacement. The system is highly versatile and, in 
dependence on the system conception, the 
correction memory can be combined with the 

30 memory correction unit, or can be constructed as 95 
a separate memory element. The replacement 
address, preferably, is correlated in the correction 
memory with the original address. This permits 
immodiatc addressing of the data if the program 

35 of the original data calls for an address of the 100 
memory. Upon addressing of the original address, 
the replacement address will then be 
automatically and immediately addressed. 
For fast and easy addressing of the 

40 replacement memory, the replacement addresses 105 
preferably are given wi'h respect to their distanco 
from the beginning or terminal or final address of 
the correction memory. Thus, and by correlating 
the replacement cells with the initial and final 

45 addresses, memory locations in the replacement 1 1 0 
memory register unit can be saved, since it is then 
only necessary to provide an indication of the 
difference of the address from a fixed end point. 
This decreases the number of the addressing bits 

50 for each address, since it is not necessary to 115 
provide a full second replacement address. In 
accordance with another and desirable feature, 
the data in the memory correction unit can be so 
placed that they can be addressed immediately 

55 adjacent the original address. 120 
The system preferably includes a memory 
correction unit which has a comparator in which 
- the called-for address is compared with those 
addresses which have been recognized to relate 

60 to defective cells or cells which tend to become 125 
defective. Upon equality, a signal is generated 
which can be termed a "defect" or "check 
replacement address" signal. This is an easily 
constructed circuit from which it can be 

65 recognized if. when data from a particular address 1 30 



are wontod, tho data ore stored In a properly 
operating coll or If a roplacomont or auxiliary 
address Is to be addressed In order to obtoln tho 
corroct data. 

The momory correction unit, proforobly, 
Includes a register In which tho addressos and 
dota con bo stored, and, In accordonco with a 
featuro of the Invention, so arrangod that tho 
memory locotlons con bo rolotod to tho Initial or 
final addrossos of tho memory. The reglstor Is 
proforobly so controllabto that addrossos con bo 
rotalnod and/or exchanged, which arrangement 
permits easy addrosslng of the memory 
arrangement by a microprocessor over the 
memory correction unit. 

Recognition of whether a memory cell Is 
defective or tends to become dofectlve, so that 
tho data thoreof can be stored In a properly 
operating celt before the first cell has become 
totally Inoperative, can be done In accordance 
with the disclosure of German 
Offenlegungsschrlft DE — OS 28 53 925, the 
disclosure of which Is hereby Incorporated by 
reference. Briefly, as disclosed In this referenced 
application, a trend of the particular cell to 
become defectivo can be determined by readlng- 
out the data from the cell, and storing the data; 
and then changing the read-out or recall voltage 
being applied to the respective memory cell, 
either in an increasing or decreasing direction, or 
sequentially increasing and decreasing, and 
comparing the data retrieved therefrom whsn tho 
read-out voltage was at design level, or varied. If 
the data do not match, a trend of the cell to 
become defective is thereby recognised before 
tho data from the particular cell actually have 
been altered over those that the cell should have 
contained. Thus, that particular ceil should then 
be labelled as one from which data are to be 
stored at an auxiliary address, and the particular 
cell considered "defective". Thus, the integrity of 
the original data within the overall memory unit is 
retained, unless the number of cells which have a 
tendency to become defective, by leakage of 
charge carrier* or accumulation of undesired 
charge carriers, approaches the capacity limit of 
the replacement ceils. 

The invention will now be described further by 
way of example with reference to the 
accompanying drawings in which: — 

Fig. 1 is a schematic representation of the 
system; 

Fig. 2 is a diagram illustrating the organization 
of data in a memory; and 

Fig. 3 is a detailed diagram of the memory 
correction unit forming part of the system. 

A computer 1 (Fig. 1 ) is connected over a data 
bus 2 and an address bus 3 and over a control bus 
4 with a memory correction unit 5. The memory 
correction unit 5 is connected over further data, 
address, and control busses 2a, 3a. 4a with the 
main memory 6 of the overall computer system. 
Solid-state memory elements in which the 
memory content can be programmed are 
particularly suitable for the memory unit 6. Such 
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momory units ore, for example, programmable 
read-only memories (PROMs), erasable 
programmable read-only memories (EPROMa), 
and electrically erasable programmable read-only 
6 memorlos (EEPROMs) or E'PROMs) made, for 
example, by tho company INTEL (RTM) under Noa. 
231 6, 27 1 8, 3636. A programming unit 7 Is 
connected to the memory 6 and to the memory 
correction unit 6. The programming unit 7 can bo 

10 controlled from tho computer, either directly as 
shown by broken-line connection a, or through 
the control bus 4 and the memory correction unit 
5, as shown by solid line lb. The programming 
unit 7 enters the respective data at the 

1 5 replacement or auxllary addresses. The memory 
correction unit 5 Is an element between the 
address counter, normally contained tn the 
computer 1 and the memory 6 which stores both 
the program as well as the data. The memory 

20 correction unit 5 can, physically, form part of the 
computer unit 1, or part of the memory unit 6, or 
may be a separate element. The drawing of Fig. 1 
shows the memory correction unit as a separate 
element for convenience and for ease of 

25 explanation of the operation. Of course, the 
computer 1 , which may be a microprocessor, 
memory correction unit 5, as well as the solid- 
state memory, may be retained on one 
semiconductor chip. 

30 A circuit arrangement, which Is described in 
detail in German Offenlegungsschrift No. DE — 
OS 28 53 925, can be used to recognize a trend 
towards defects in the memory cells of memory 6. 
that is. to predict that data may be lost in the 

35 future, before such loss has actually occurred. 
Other systems to recognize errors or a trend 
towards errors, and to localize the errors, can be 
used. 

Referring to Fig. 2, tne correct information D„ 

40 D,. D 3 D n , which may be termed, 

collectively, information D ( . is stored at original 

addresses N |f N,. N 3 N n , collectively referred 

to as initial or correct address N r Upon 
recognition of an error, a replacement initial 

45 address N/ which, specifically, is formed by the 
addresses N/, N,\ together with the original or 
initial address N.. To load the initial data, together 
with the initial address, for example data O t and 
initial address N, at an auxiliary memory location 

50 N,\ the additional programming unit 7 is used. 
Such additional programming units 7 are known, 
and may be constructed, for example, as 
described in DE — OS 28 53 925; other 
arrangements also may be used, as described, for 

55 example, in. the relevant technical literature. 
The correction memory locations may be 
placed in a separate correction memory, or can be 
placed as part of the program memory, the data 
memory, or any other suitable and convenient 

60 physical unit. The correction memory, thus can be 
a portion of the memory unit, with memory cells 
which do not exhibit a defect or a trend towards 
defective operation. 

Fig. 2 illustrates a suitable form of organization 

65 of the memory 6. The control program with data 



Is stored In the uppor portion of tho memory 6. In 
a further portion of tho memory 6, addresses N,' 
to N n ' are located; tho replacement addrossos N,' 
will contain not only the data D, to D n , but also 
70 the original or Initial addrossos N, to N fl . As far 
as address locations are concornod, the correction 
momory will have fewer storage addrossos and 
storage places than the program and data 
memory; tho dlfferonco tn storage locations may 
75 be substantial. In accordance with a feature of tho 
Invention, a method ond syjtem Is provided to 
provont overflow of data In the correction momory 
upon Introduction of new Information thorolnto. 
The processor or computer 1 Is arranged to 
60 determine as tho correction memory or correction 
memory addresses are being occupied since, 
when they are all occupied, replacement of the 
memory unit 6 will bo required. 

Computer systems In which repetitively 
85 recurring events arise, for example reset, start of a 
rerun of a program and the like, the Initial 
addresses N, transferred to the correction memory 
when a particular address Is round to nave a trend 
towards becoming defective are stored In special 
90 register provided for the Initial addresses, and 
compared by the address which is generated by 
the computer 1 . Upon coincidence between the 
addresses supplied by tho computer 1 and the 
addresses stored in the correction register, the 
95 data are retrieved not from the original or initial 
address N,, but rather from the auxiliary or 
replacement address N,'. The address N/ car bo 
so addressed that, rather than transferring tho 
initial addross N,. the address N/ is transferred to 

100 the memory 6. In another alternative, the relative 
distance of the, correction address N/ from a 
reference may be given, for example from either 
one of the end or terminal addresses available in 
the memory 6. Providing a difference address, 

1 05 that is. the distance from a reference point, has 
the advantage that storage capacity is saved 
since a distance can oe oerined by a lesser 
number of bits than the complete address. Fig. 2 
shows two examples in which the distance a $ and 

110 the distance a n . respectively, are shown. 
Addressing the replacement address thus is 
possible in various modes: • 

For one. the replacement address N/ can be 
given completely; for another, the distance to a 

1 1 5 reference, and especially to the beginning or end 
of the memory locations of the correction memory 
are given. This, however, requires that the base or 
reference address additionally is stored, if the 
program memory and the data memory as well as 

1 20 the correction formed one structural unit. 

Memory correction, with reference to Fig. 3: 
The data bus 2. address bus 3, and control bus 4 
are shown schematically. These buses are 
connected to the memory correction unit 5. both 

125 at its input as well as from its output. The contro! 
for the programming unit 7 has been omitted for 
clarity; its arrangement is well known in the art. 
The address bus 3 which comes from the 
computer 2 provides addresses to an input 

1 30 register 8. The addresses in the input register 8 
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are compared In a comparator 9 with the Initial 
addresses N, which are stored In the Initial 
address register 10. The address register 10, 
forming the original address memory, stores only 
5 those addresses which relate to defective 
memory colls, or to cells which tond to become 
defective, as determined for example In 
accordance with the disclosure of the German 
Offenlegungsechrift OE — OS 28 53 925. tf no 

1 0 comparison Is Indicated by comparator 9. that Is, 
If the address supplied by address bus 3 does not 
have an equal address of a defective cell, the 
address tine 3 Is directly connected from the Input 
register to the output register 1 3 for subsequent 

1 5 connection to the commanded address In the 
memory 6 on the output address line 3a. If, 
however, a correlation Is established between an 
address In the register 10 and the address on bus 
3 derived from processor 1 , the address In the 

20 Input 8 Is blocked and, rather, a corresponding 
replacement address N/ ( stored In a register 
forming the replacement address memory 1 1. Is 
connected to the output register 1 3. Control of 
the respective comparison, and either through 

25 switching of the address from bus 3, or switching 
of the replacement address from memory 1 1 Is 
effected by control connecting lines 4a, 46, which 
interconnect the register positions of the 
replacement address memory 1 1, the addross 

30 comparator 9, and the input register 8. The data 
which are stored either in good cells forming the 
original address or in cells at the replacement 
address are read-out over e return data bus 30 
through a buffer 1 2 and the data bus 3. Other 

35 read-out arrangements, for example connecting of 
the buffer 1 2 to the data bus 2,*i course, can be 
used, in dependence on the system's concept. 
Control and timing are effected by suitable signals 
on the control bus 4. 

40 The replacement address memory 1 1 may 
store either a complete address or an address 
with respect to a reference address. Storing data 
with respect to a reference requires, usually, a 
lesser number of addressing bits than storing a 

45 complete address. It requires, however, a 
computation section which reconstitutes a 
complete replacement address which includes the 
reference address as well as the particular 
location from the reference address. 

50 A further possibility is this: The address register 
1 1 may receive the data D t directly, and in such 
arrangement, storing and providing a replacement 
address N/ in the memory correction unit can be 
entirely eliminated. Upon placing the initial 

55 address N, in the memory correction unit, then, 
the additional information D, must also be placed v 
therein. This provides for a very compact storage 
of replacement addresses, provided, however, the 
bits required for the data, that is. the set of data 

60 bits, is no longer than the address itself. 

The system and method permits correction of 
data, as well as prevents loss of data. There is no 
overprogramming. it avoids the necessity of 
continuously and prophelactically refreshing 

65 memories which, as known, degrade upon 



continuous re-programmlng. Thus, inherently 
perfectly operating memory structures may be 
abused by continuous ro-programmlng. Such 
abuse Is avoided by only selecting for exchange of 

70 addresses those coils In which a trend towards 
defective operation has been dltcovored. The 
requirement for redundancy In storage of memory 
locations la substantially reduced since, from 
experience, only a small portion of memory cells 

76 In an ovorall memory may become defoctivo. 
A warning signal can be generotod, for 
example, by o roplacoment address memory 1 1 
when all but three of the reptacemont addresses 
are occupied, as schematically shown by the 

80 fragmentary address memory N ft _ a \ providing a 
warning signal over line W that only two more 
replacement memory locations are available. 

CLAIMS 

1 . Method of ensuring the Integrity of data In 
85 an electronic memory particularly Including 
erasable programmable read-only memory 
eloments (EPROMs) forming said memory unit. In 
case of Incipient or actual malfunction of one or 
more data storage celts In the memory unit. In 
90 which the data are stored at auxiliary memory 
locations, comprising storing the original data 
together with the original address in the auxiliary 
memory cell or roplacoment memory location at a 
replacement address. 
95 2. Method as claimed in claim 1 . including the 
step of storing replacement addresses in a 
correction or replacement address memory. 

3. Method as claimed In claim 2, Including the 
step of storing the replacement addresses in a 

1 00 correction or replacement address memory 
section forming a portion of said memory unit. 

4. Method as claimed in claim 1. including tho 
step of generating a replacement address 
inherently characterising the replacement address 

1 05 of the auxiliary memory cell. 

5. Method as claimed In claim 1 , including the 
step of generating a replacement address with 
respect to a reference address or reference 
location of a replacement address memory unit. 

110 6. Method as claimed In claim 5, In which said 
reference address is a terminal address of said 
correction memory unit. 

7. Method of ensuring the integrity of data in 
an electronic memory particularly including 

1 1 5 erasable programmable read-only memory 
elements forming said memory unit, in case of 
incipient or actual malfunction of one or more 
data storage cells in the memory unit, in which 
the data are stored at auxiliary memory locations 

1 20 comprising the steps of re-storing the original 
data stored at an original address in an auxiliary 
memory at a replacement address together with 
the original address, addressing the original 
address, and determining if the original address 

125 contained data subject to malfunction of the 
memory and. if so, retrieving said data with 
reference to the original address in the auxiliary 
memory location. 

8. Method as claimed in claim 1 or 7, including" 
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the step of providing a warning signal If a 
predetermined number of replacement addresses 
have been occupied by data. 

9. System to ensure the Integrity of data In an 

5 electronic memory unit particularly Including 
erasable programmable read-only memory 
tlemonts (EPROMs) In case of incipient or actual 
malfunction of a data storage cell in the memory 
and having a computor connected to the 

■ 0 electronic memory unit, and comprising a 

memory correction unit connected between the 
computer and the memory unit and Including a 
comparator means for storing addresses of 
memory cells or memory locations which are 

i 5 subject to possible malfunction connected to the 
comparator; and a replacement address memory 
storing replacement addresses, said comparator 
comparing an address supplied thereto from the 
computer with the address in the possible 

!0 malfunction address storage means, the 
comparator providing an output signal upon 
equality to supply data to the computer from a 
replacement address as determined by the 
replacement address memory. 

'5 10. System as claimed In claim 9, In which said 
memory correction unit comprises an input 
register and an output register for temporary 
storage of addresses or data. 

1 1 . System as claimed in claim 9, in which the 

■0 means for storing addresses of possible 
malfunctiong memory cells or locations 
comprises a first register and in which the 
replacement address memory comprises a second 
register in the form of a complete address. 

5 12. Sysiem as claimed in claim 9. in which the 
means for storing addresses of possible 



malfunctioning memory cells or locations 
comprises a first register and the replacement 
cddross memory comprises a second register 
40 storing the distance of replacement addresses 
from a reference position or reforence address. 

13. System as claimed In claim 9, In which the 
means for storing addresses of possible 
malfunctioning memory cells or locations 

45 comprises a first register and the replacement 
address memory has sufficient memory locations 
for storing the original address and the data at a 
replacement address location. 

1 4. System as claimed In claim 9, In which the 
50 means for storing addresses of possible 

malfunctioning memory cells or locations 
comprises a first register and the replacement 
address memory has sufficient memory locations 
for storing the original address and the data at 
55 adjacent replacement address locations. 

1 5. System as claimed In claim 9, in which said 
comparator Is connected to an input register and 
said replacement address memory Is connected 
to an output register to respectively control one of 

60 said registers to change the address data as 

received to modified output address data In the 

output register fo r addressing of data in 

replacement addresses. 

1 6. Method of ensuring the integrity of data in 
65 an electronic memory substantially as herein 

described with reference to and as illustrated in 

the accompanying drawings. 

1 7. System to ensure the integrity of data in an 

electronic memory unit substantially as herein 
70 described with reference to and as illustrated in 

the accompanying drawings. 
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